Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
File: htqvTmjTIiSCMFRM2NspVo5s8AM.mft (raw, json)
Hash identifier: bNpR3wodf5UPlqbHOA/To2Ramo03bm5xeOrc83uMWlc=
Subject key identifier: 51:D0:2D:95:90:C0:B9:9D:94:08:E7:54:F4:97:3D:C7:0C:44:2E:F8
Authority key identifier: 86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
Certificate issuer: /CN=86daaf4e68d322248230544cd8db29568e6cf003
Certificate serial: 0196A051E6EC0A3E2EF8F7C6CFBAE19B1CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 12:00:44 +0000
Manifest this update: Mon 05 May 2025 12:00:44 +0000
Manifest next update: Tue 06 May 2025 12:00:44 +0000
Files and hashes: 1: htqvTmjTIiSCMFRM2NspVo5s8AM.crl (hash: H8e8kJ0huODPnXe097dne0AIeS4xpNtLN/Sgs8K25n4=)
2: uiT-f1UkP8u3VtHM1H2WjnfclYk.roa (hash: tX+V4MHF7T2iULGYZ2/cXlHTKSsA+WHHf7K/tt0Vdcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:e6:ec:0a:3e:2e:f8:f7:c6:cf:ba:e1:9b:1c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86daaf4e68d322248230544cd8db29568e6cf003
Validity
Not Before: May 5 12:00:44 2025 GMT
Not After : May 6 12:00:44 2025 GMT
Subject: CN=51d02d9590c0b99d9408e754f4973dc70c442ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:4b:fc:23:9c:10:3c:47:e9:95:9c:2b:dc:
cf:df:dc:22:0a:f4:50:36:8e:90:e4:d5:87:c9:c4:
e7:c1:29:2d:f3:68:d1:ab:aa:31:a2:06:c7:3c:b0:
10:5a:7c:bd:55:f8:9e:f3:42:cc:60:f1:1f:fe:7e:
80:6f:6b:1c:24:25:c2:5c:9d:03:6e:b0:2e:9f:30:
b6:a1:49:40:78:e2:2a:15:d0:e8:c8:0b:34:af:88:
e0:5f:23:59:4a:58:df:3c:1d:42:af:7d:57:4b:b3:
35:7b:44:4f:ef:91:d8:97:0c:46:12:3e:4e:e7:a2:
8a:c7:5d:a5:60:65:cd:fc:a0:22:3e:05:0f:72:0a:
73:39:d6:ee:f7:7d:08:92:5c:ed:aa:1a:c5:0f:d9:
9b:9c:7e:3b:74:26:8c:f3:2d:b5:2e:c4:d1:70:61:
76:38:4e:19:b5:7e:02:76:95:5d:18:e4:bb:90:79:
2c:78:db:4c:a5:a5:30:fa:be:8f:92:ff:b7:38:15:
6b:64:40:fe:1b:fc:3f:99:ba:f5:15:3f:33:bb:8d:
18:62:98:3b:e4:a0:a4:8c:7d:b7:2a:ba:ff:6d:47:
15:d4:4e:53:b7:f5:ba:89:bf:a8:55:35:b7:c8:d9:
68:3b:49:e7:2e:b3:4e:e0:b4:79:ee:d8:cd:47:9a:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D0:2D:95:90:C0:B9:9D:94:08:E7:54:F4:97:3D:C7:0C:44:2E:F8
X509v3 Authority Key Identifier:
keyid:86:DA:AF:4E:68:D3:22:24:82:30:54:4C:D8:DB:29:56:8E:6C:F0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htqvTmjTIiSCMFRM2NspVo5s8AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/57d1db-d8eb-49e0-8133-5bc90505d8ca/1/htqvTmjTIiSCMFRM2NspVo5s8AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:eb:a4:95:13:7c:6d:69:ca:69:79:15:d0:d0:dd:5d:eb:33:
b2:8e:83:a2:5b:b7:25:21:14:77:10:06:92:89:15:b3:8a:0d:
31:b4:b7:4b:4a:cd:8c:76:43:8e:1a:69:83:85:9f:d0:5a:c4:
31:a1:85:8a:1c:95:33:d1:3a:e8:64:94:44:35:45:64:02:b6:
11:03:1a:94:3f:76:2c:4b:3d:d0:60:0a:03:fb:5a:ec:27:b2:
b6:49:53:6b:28:41:77:55:12:4b:63:10:fe:a2:c7:0b:79:40:
5d:19:c6:73:8a:da:9f:b3:02:a6:50:6c:e0:a1:d1:1c:90:ce:
fd:e8:a1:db:c9:bf:d7:c2:8a:e2:b2:13:85:66:c2:08:4f:9f:
01:fd:6c:4d:76:4e:85:0e:2a:da:3a:8f:4b:f0:e7:4f:ce:41:
9c:33:ff:02:9b:4c:f3:a9:df:2e:90:6f:fc:5f:58:84:90:20:
6c:89:a7:e7:ac:79:6f:c4:df:dc:d6:fa:ff:cd:32:04:fb:a2:
a3:7f:ba:55:ab:6d:8c:3f:c5:42:c6:75:7e:b3:79:53:2c:aa:
62:e9:83:be:4a:25:d2:b3:37:dd:a0:7e:ea:b5:5f:f6:bf:97:
34:d7:1e:ce:8e:9d:62:31:cb:23:31:1e:7c:77:29:7d:a8:9d:
b3:da:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:54:39 2025 by rpki-client